Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File:                     eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier:          KN2CYy+goOUkm5f+wMlENWAdAiU0AmhbRwJPIkos5VI=
Subject key identifier:   81:EE:4E:B1:3B:E5:09:B1:8C:17:7F:3D:99:BA:D1:22:B4:96:7D:E8
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer:       /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial:       01975234D83428217DDBB43D31FA368B7E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 01:01:24 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:24 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:24 +0000
Files and hashes:         1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
                          2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: 2MMOUmkPvTgtqGN3W0Kt1TTeaBnt8FGozrb+sBM3ktY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:d8:34:28:21:7d:db:b4:3d:31:fa:36:8b:7e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
        Validity
            Not Before: Jun  9 01:01:24 2025 GMT
            Not After : Jun 10 01:01:24 2025 GMT
        Subject: CN=81ee4eb13be509b18c177f3d99bad122b4967de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:1c:04:de:35:37:c5:79:34:bb:5a:fc:1b:
                    dc:33:99:31:f3:e1:49:8c:03:f5:73:73:ab:83:01:
                    8c:e3:33:c6:20:67:ca:c9:92:e8:64:c4:59:3d:de:
                    98:61:48:3e:b1:86:28:93:76:f2:a2:7e:be:7b:f0:
                    84:6c:12:90:a5:81:8b:4c:67:33:6a:af:b5:78:67:
                    5d:46:96:17:d9:1b:84:66:ac:2e:d6:40:0e:e3:b5:
                    52:cf:4b:a9:04:e3:fb:c2:0c:7e:10:ec:2e:32:ec:
                    39:47:0e:a7:90:ea:ee:69:d9:31:f4:42:1e:a6:8f:
                    94:6d:ce:c7:66:35:ea:66:4b:ce:1b:ab:98:38:15:
                    15:15:6b:20:b6:8b:eb:63:61:a2:c9:8b:b7:7b:07:
                    d8:f0:4f:39:56:6d:be:ab:ce:74:b1:69:1b:2a:65:
                    86:c6:2d:f5:49:9b:ea:5d:0b:b5:c7:4a:27:32:3f:
                    14:3b:4c:6c:54:c9:ee:ef:c7:68:45:db:16:9f:37:
                    db:98:d8:f5:51:9f:1e:41:2b:f8:a2:be:84:a9:b2:
                    9d:0b:a8:92:07:9e:24:a4:54:e9:7b:dc:68:19:e6:
                    9a:d8:fb:fd:e9:81:81:e2:3d:04:9d:25:52:85:3c:
                    03:df:39:b7:ef:f1:db:12:53:7e:de:81:1d:a8:26:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:4E:B1:3B:E5:09:B1:8C:17:7F:3D:99:BA:D1:22:B4:96:7D:E8
            X509v3 Authority Key Identifier:
                keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:98:f4:cd:f4:53:a8:3c:2e:e4:ab:62:e9:d6:97:0c:ad:
         17:d6:91:3d:df:b7:b4:cc:9d:91:5b:cf:71:fb:34:06:03:41:
         8e:17:ba:4a:90:86:0b:7b:22:7b:f6:d4:da:e1:26:9f:9d:2f:
         35:17:2a:4a:50:90:88:bc:5f:8b:64:74:3c:87:b0:2b:40:fb:
         bb:0f:d7:72:62:9f:c5:40:16:8a:f9:35:f0:1c:7b:92:88:49:
         c1:94:ce:02:e3:81:e1:da:f0:76:1a:6c:88:7b:25:f2:ae:a3:
         9b:4e:d3:93:74:5e:3c:de:99:18:7d:a3:95:6c:8c:bf:6e:a9:
         e2:74:49:00:3e:5a:e9:b3:6b:d2:9e:b0:86:f7:0e:d8:96:46:
         48:7c:b8:59:f9:aa:ff:63:18:43:5a:a3:a3:61:c2:b0:fa:e6:
         d1:6f:b0:93:3c:54:b5:4e:a3:df:c7:f5:e6:f9:3a:02:98:17:
         09:47:6e:c2:95:69:6c:12:fe:25:67:e6:6e:e8:51:01:a2:be:
         f7:23:49:9e:52:04:70:60:74:9b:3b:53:33:1e:37:41:7b:a0:
         81:86:0e:88:9c:5a:c1:a9:35:7b:c2:20:3a:51:e5:0f:e4:b8:
         95:0e:ba:5c:a8:74:43:2b:ec:ff:61:6f:6a:e9:c7:c7:4a:c4:
         1e:bf:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:41 2025 by rpki-client